$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f1e39811-9d98-4b6e-af73-f0529b50a66b.roa File: f1e39811-9d98-4b6e-af73-f0529b50a66b.roa (raw, json) Hash identifier: Tl19aY1x/dVSUUw+DyhEIjEz70n/V0CSzT/m2GWv8uI= Subject key identifier: 3F:88:DB:23:67:AF:B5:2A:ED:FE:44:08:67:20:D5:41:27:92:85:0A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 255555CCDFDF37AA3F5D2D59CD92E9BBE026311B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f1e39811-9d98-4b6e-af73-f0529b50a66b.roa Signing time: Tue 21 Jul 2026 00:30:14 +0000 ROA not before: Tue 21 Jul 2026 00:30:14 +0000 ROA not after: Mon 19 Oct 2026 23:59:59 +0000 asID: 14618 IP address blocks: 16.186.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:55:55:cc:df:df:37:aa:3f:5d:2d:59:cd:92:e9:bb:e0:26:31:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 21 00:30:14 2026 GMT Not After : Oct 19 23:59:59 2026 GMT Subject: serialNumber=baec0c39a2bd6276c8f49c7bc214e9ef5a756cfa310ffd229ad5d12bc6d9c146, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e0:4f:13:6e:8b:5c:8e:d7:d1:48:f5:ba:50: 69:fb:81:42:8c:7e:39:3c:a6:04:0b:3f:90:b1:19: c9:35:4c:a5:64:c7:9f:82:fc:7e:ef:ba:2e:3a:ba: 72:de:17:29:28:26:54:d9:7e:b2:a1:02:0b:4a:42: f2:64:69:1f:86:e8:a9:07:11:10:0a:1d:9f:dd:ff: a1:0e:63:8e:d3:ed:62:99:cc:ff:12:78:44:e5:1e: 18:87:a1:aa:d8:20:dc:13:22:53:4a:27:89:b6:e4: f5:92:ee:4e:cd:2f:3a:94:d1:75:19:70:e7:45:cf: bb:87:8c:e7:c7:e3:c7:9f:b8:5b:b4:3f:6a:3d:32: eb:7a:2b:50:25:47:e2:b9:33:28:ee:9b:48:16:b6: dc:d1:2a:06:bb:0b:2d:6f:ae:89:1b:b8:71:5a:91: ff:ba:b7:aa:6b:a1:5d:1e:75:62:1e:bd:81:75:8b: 7d:96:1e:7e:8f:ca:fa:f9:6e:18:00:20:5f:fb:48: 34:23:6a:7f:93:f9:8b:5f:cf:01:d1:e3:5d:f6:f1: b2:6a:af:7e:c0:8b:2a:6a:f2:b2:71:77:b9:81:76: 01:5e:52:98:93:45:cb:e3:4e:b1:3a:2d:fc:dd:34: 37:49:db:ec:5d:e0:17:ef:53:86:97:27:a4:23:ca: e5:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:88:DB:23:67:AF:B5:2A:ED:FE:44:08:67:20:D5:41:27:92:85:0A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f1e39811-9d98-4b6e-af73-f0529b50a66b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.186.0.0/16 Signature Algorithm: sha256WithRSAEncryption 8d:58:a5:65:a1:3f:b1:53:46:c4:e4:be:a8:1a:a8:7a:8c:08: 1a:7f:8c:3a:6e:b2:0b:76:99:7f:c7:6c:48:cf:bd:7e:9b:a3: ef:ed:ea:22:e3:19:17:72:0e:71:9b:ed:5a:da:80:28:64:36: 61:fc:03:f2:60:d2:05:f7:a1:f6:0e:ea:3c:14:69:25:4a:61: 05:f9:f0:bb:a3:61:57:1d:43:98:92:16:c0:ff:10:69:1e:69: 69:37:7f:e8:9e:3f:7d:1d:67:f4:1c:3f:28:ab:68:3f:3a:7b: 5c:9a:23:78:a1:2d:3e:66:09:86:43:7f:e3:dc:60:59:11:a8: 04:93:4a:c4:c3:5c:05:fc:f8:9f:2b:04:7c:0c:a6:17:86:ad: 5b:e7:56:1d:d9:94:bb:01:43:b6:fc:0e:22:fa:04:e3:35:30: e2:a7:e6:f7:9e:0f:4c:b7:31:b3:73:ec:05:ab:13:b6:ba:35: 29:f6:7e:97:e6:b4:36:51:ff:72:9a:7d:f6:bf:96:11:fc:31: 4d:05:c2:e1:86:54:6b:99:ac:50:47:4e:eb:77:5f:08:3f:46: 94:7a:95:49:db:33:0c:40:18:36:56:64:0c:39:95:9a:aa:74: 0d:19:e2:f4:4d:df:c3:e2:6d:50:ae:2c:39:7c:24:3b:b4:fb: cb:6d:24:5a -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUJVVVzN/fN6o/XS1ZzZLpu+AmMRswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzIxMDAzMDE0WhcNMjYxMDE5MjM1OTU5 WjB6MUkwRwYDVQQFE0BiYWVjMGMzOWEyYmQ2Mjc2YzhmNDljN2JjMjE0ZTllZjVh NzU2Y2ZhMzEwZmZkMjI5YWQ1ZDEyYmM2ZDljMTQ2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC54E8TbotcjtfRSPW6UGn7gUKMfjk8pgQLP5CxGck1TKVk x5+C/H7vui46unLeFykoJlTZfrKhAgtKQvJkaR+G6KkHERAKHZ/d/6EOY47T7WKZ zP8SeETlHhiHoarYINwTIlNKJ4m25PWS7k7NLzqU0XUZcOdFz7uHjOfH48efuFu0 P2o9Mut6K1AlR+K5Myjum0gWttzRKga7Cy1vrokbuHFakf+6t6proV0edWIevYF1 i32WHn6Pyvr5bhgAIF/7SDQjan+T+YtfzwHR41328bJqr37Aiypq8rJxd7mBdgFe UpiTRcvjTrE6LfzdNDdJ2+xd4BfvU4aXJ6QjyuWlAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUP4jbI2evtSrt/kQIZyDVQSeShQowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2YxZTM5ODExLTlkOTgtNGI2ZS1hZjczLWYwNTI5YjUwYTY2Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQujANBgkqhkiG9w0BAQsFAAOCAQEAjVilZaE/sVNGxOS+qBqoeowIGn+M Om6yC3aZf8dsSM+9fpuj7+3qIuMZF3IOcZvtWtqAKGQ2YfwD8mDSBfeh9g7qPBRp JUphBfnwu6NhVx1DmJIWwP8QaR5paTd/6J4/fR1n9Bw/KKtoPzp7XJojeKEtPmYJ hkN/49xgWRGoBJNKxMNcBfz4nysEfAymF4atW+dWHdmUuwFDtvwOIvoE4zUw4qfm 954PTLcxs3PsBasTtro1KfZ+l+a0NlH/cpp99r+WEfwxTQXC4YZUa5msUEdO63df CD9GlHqVSdszDEAYNlZkDDmVmqp0DRni9E3fw+JtUK4sOXwkO7T7y20kWg== -----END CERTIFICATE-----Generated at Thu Jul 23 22:36:17 2026 by rpki-client